Dear Neal,Thanks To You My Comp Seems To Be Better.But As You Requested,I Post The HiJackthis log,ComboFix Log And VundoFix Log.
VundoFix V6.5.11
Checking Java version...
Java version is 1.5.0.5
Old versions of java are exploitable and should be removed.
Scan started at 7:19:05 AM 11/8/2007
Listing files found while scanning....
C:\WINDOWS\system32\tgdgdkap.dll
Beginning removal...
Attempting to delete C:\WINDOWS\system32\tgdgdkap.dll
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:09:38 AM, on 11/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Creative\Shared Files\CTDevSrv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\ThumbDrive Guard\SmartProtectionService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\LClock\LClock.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\PC-Doctor 5 for Windows\PcdSmartMonitor.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\HP\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\HP\Digital Imaging\bin\hpoevm08.exe
C:\HP\KBD\KBD.EXE
C:\Documents and Settings\ComputerFixer\Desktop\HiJackThis.exe
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IE7Pro\IE7Pro.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: {63643ea3-cf99-8dda-6ae4-21494cab7cd7} - {7dc7bac4-9412-4ea6-add8-99fc3ae34636} - C:\WINDOWS\system32\mcjibeeq.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\sw g.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch. exe" -start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PCDrSmartMonitor] "C:\Program Files\PC-Doctor 5 for Windows\PcdSmartMonitor.exe" -r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [RemoveElanIcon] C:\WINDOWS\system32\ELAN.exe
O4 - HKLM\..\Run: [AME_CSA] rundll32 amecsa.cpl,RUN_DLL
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [f8a53b83] rundll32.exe "C:\WINDOWS\system32\vgxwcsim.dll",b
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7Pro\IE7Pro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7Pro\IE7Pro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\hide my ip 2007\proxyfilter.dll
O15 - ESC Trusted Zone:
http://*.update.microsoft.com
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) -
http://www.creative.com/su/ocx/15030/CTSUEng.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) -
http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) -
http://messenger.zone.msn.com/EN-SG/.../GAME_UNO1.cab
O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) -
http://gamedownload.ijjimax.com/game...lugin11USA.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsu...?1176815616421
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/micr...?1181043038593
O16 - DPF: {7606693A-C18D-4567-AF85-6194FF70761E} (GomWeb Control) -
http://app.gomtv.com/gom/GomWeb.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) -
http://gamedownload.ijjimax.com/game...Plugin9USA.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) -
http://messenger.zone.msn.com/binary...r.cab56986.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - Winlogon Notify: opnmnkl - opnmnkl.dll (file missing)
O20 - Winlogon Notify: winvtv32 - winvtv32.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartProtection Agent Service (SmartProtection Service) - Unknown owner - C:\Program Files\ThumbDrive Guard\SmartProtectionService.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
--
End of file - 15756 bytes
C:\WINDOWS\system32\tgdgdkap.dll Has been deleted!
Performing Repairs to the registry.
Done!
ComboFix 07-11-08.1 - NoToVirus 2007-11-08 7:44:59.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.936.86.1033.18.559 [GMT 8:00]
Running from: C:\Documents and Settings\ComputerFixer\Desktop\ComboFix.exe
* Created a new restore point
.
Unable to gain System Privileges
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Compaq_Owner\Application Data\1601899285.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1602613781.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1605105685.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1607765781.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1608918549.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1614441493.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1616208405.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1616473877.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1617541909.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1618479125.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1620541205.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1620715541.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1621201685.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1621827861.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1622077717.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1625825301.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1626230293.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1627987989.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1628608789.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1628702997.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1628795669.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1629595669.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1630010645.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1633044501.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1634062101.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1635792917.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1638198549.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1639106069.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1639598357.exe
C:\Documents and Settings\Compaq_Owner\Application Data\1640623893.exe
C:\Documents and Settings\Compaq_Owner\Application Data\a8shliz.exe
C:\Documents and Settings\Compaq_Owner\Application Data\b0syyqc.exe
C:\Documents and Settings\Compaq_Owner\Application Data\bhc046r.exe
C:\Documents and Settings\Compaq_Owner\Application Data\bilrz0n.exe
C:\Documents and Settings\Compaq_Owner\Application Data\c5tj5g1.exe
C:\Documents and Settings\Compaq_Owner\Application Data\c8cgtbb.exe
C:\Documents and Settings\Compaq_Owner\Application Data\diia647.exe
C:\Documents and Settings\Compaq_Owner\Application Data\e2nvgap.exe
C:\Documents and Settings\Compaq_Owner\Application Data\epxyw3a.exe
C:\Documents and Settings\Compaq_Owner\Application Data\etb1poo.exe
C:\Documents and Settings\Compaq_Owner\Application Data\f8seq2c.exe
C:\Documents and Settings\Compaq_Owner\Application Data\fhfqb6e.exe
C:\Documents and Settings\Compaq_Owner\Application Data\gixta1n.exe
C:\Documents and Settings\Compaq_Owner\Application Data\hq6xybg.exe
C:\Documents and Settings\Compaq_Owner\Application Data\k74squn.exe
C:\Documents and Settings\Compaq_Owner\Application Data\kfzwu18.exe
C:\Documents and Settings\Compaq_Owner\Application Data\lfus38j.exe
C:\Documents and Settings\Compaq_Owner\Application Data\ltvfw15.exe
C:\Documents and Settings\Compaq_Owner\Application Data\n5eblhx.exe
C:\Documents and Settings\Compaq_Owner\Application Data\o4svlnc.exe
C:\Documents and Settings\Compaq_Owner\Application Data\odsaoe1.exe
C:\Documents and Settings\Compaq_Owner\Application Data\oim5445.exe
C:\Documents and Settings\Compaq_Owner\Application Data\p4p
C:\Documents and Settings\Compaq_Owner\Application Data\p4p\rss.opml
C:\Documents and Settings\Compaq_Owner\Application Data\p4p\rsslasturl.txt
C:\Documents and Settings\Compaq_Owner\Application Data\p75kyya.exe
C:\Documents and Settings\Compaq_Owner\Application Data\qz9qz8t.exe
C:\Documents and Settings\Compaq_Owner\Application Data\ror7zzs.exe
C:\Documents and Settings\Compaq_Owner\Application Data\sg46j5k.exe
C:\Documents and Settings\Compaq_Owner\Application Data\t2penap.exe
C:\Documents and Settings\Compaq_Owner\Application Data\u7i3rpm.exe
C:\Documents and Settings\Compaq_Owner\Application Data\uhy7vgh.exe
C:\Documents and Settings\Compaq_Owner\Application Data\vovm8bj.exe
C:\Documents and Settings\Compaq_Owner\Application Data\vyrsl5l.exe
C:\Documents and Settings\Compaq_Owner\Application Data\yir0aoi.exe
C:\Documents and Settings\Compaq_Owner\Application Data\yp5m54y.exe
C:\Documents and Settings\Compaq_Owner\Application Data\zt9m5xk.exe
C:\Documents and Settings\Compaq_Owner\Favorites\Error Cleaner.url
C:\Documents and Settings\Compaq_Owner\Favorites\Privacy Protector.url
C:\Documents and Settings\Compaq_Owner\Favorites\Spyware&Malware Protection.url
C:\Documents and Settings\ComputerFixer\Application Data\1629246997.exe
C:\Documents and Settings\ComputerFixer\Application Data\kzdal7f.exe
C:\Documents and Settings\ComputerFixer\Favorites\Online Security Guide.lnk
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1611186453.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1612128789.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1612557333.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1613065749.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1616351253.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1616599061.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1616982549.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1617257493.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1617372437.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1618514453.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1618534421.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1618806549.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1621538069.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1629067029.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1631638805.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1633413141.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1633419797.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1638003989.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1639200277.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\1641443861.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\ak9ayqz.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\axgfer4.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\c3cwuub.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\ce00hre.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\ddr1uo0.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\du486m0.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\dy5njg7.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\l1ute8h.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\o92l16r.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\p4p
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\p4p\rss.opml
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\p4p\rsslasturl.txt
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\pya9w4n.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\q0tr0h0.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\q1sk3lq.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\ri2iqow.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\t25izwb.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\ttmvf41.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\uh4b369.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\v05x6jv.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\ycxo33f.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\zw9civ6.exe
C:\Documents and Settings\Serangoon.OURCOMPUTER\Favorites\Online Security Guide.lnk
C:\WINDOWS\hostctrl.dll
C:\WINDOWS\nmcuninstall.exe
C:\WINDOWS\rs.txt
C:\WINDOWS\search_res.txt
C:\WINDOWS\system32\bund1
C:\WINDOWS\system32\bund1\temp.txt
C:\WINDOWS\system32\gjkmp.bak1
C:\WINDOWS\system32\gjkmp.bak2
C:\WINDOWS\system32\gjkmp.ini
C:\WINDOWS\system32\gjkmp.ini2
C:\WINDOWS\system32\gjkmp.tmp
C:\WINDOWS\system32\IntelVideoDivX.dll
C:\WINDOWS\system32\pmkjg.dll
C:\WINDOWS\system32\pskill.exe
C:\WINDOWS\system32\tgdgdkap.dllbox
C:\WINDOWS\system32\winetn32.dll
D:\Autorun.inf
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\LEGACY_DOMAINSERVICE
-------\LEGACY_NPF
-------\DomainService
-------\nm
((((((((((((((((((((((((( Files Created from 2007-10-08 to 2007-11-08 )))))))))))))))))))))))))))))))
.
2007-11-08 07:42 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-08 07:19 <DIR> d-------- C:\VundoFix Backups
2007-11-08 05:27 86,080 --a------ C:\WINDOWS\system32\vgxwcsim.dll
2007-11-08 05:27 79,936 --a------ C:\WINDOWS\system32\mcjibeeq.dll
2007-11-08 05:26 71,232 --a------ C:\WINDOWS\system32\molyallc.exe
2007-11-07 22:29 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-11-07 22:29 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-11-07 22:29 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-11-07 22:29 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-11-07 22:29 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-11-07 22:29 5,060 --a------ C:\WINDOWS\system32\tmp.reg
2007-11-07 22:19 79,936 --a------ C:\WINDOWS\system32\tonyckli.dll
2007-11-07 22:16 <DIR> d-------- C:\Documents and Settings\ComputerFixer\Application Data\Netscape
2007-11-07 21:28 <DIR> d-------- C:\Documents and Settings\ComputerFixer\Application Data\Grisoft
2007-11-07 21:27 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-11-07 21:27 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-11-07 20:04 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-11-07 20:04 60,800 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2007-11-07 20:01 <DIR> d-------- C:\Program Files\Symantec
2007-11-07 20:00 <DIR> d-------- C:\Norton360
2007-11-07 19:59 <DIR> d-------- C:\Program Files\New Folder (2)
2007-11-07 19:59 <DIR> d-------- C:\Program Files\New Folder
2007-11-07 19:59 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-11-07 11:15 87,104 --a------ C:\WINDOWS\system32\kuqqrdfx.dll
2007-11-07 11:15 81,472 --a------ C:\WINDOWS\system32\mmsdrxpv.dll
2007-11-07 11:14 145,984 --a------ C:\WINDOWS\system32\jlhnpylj.dll
2007-11-06 08:49 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-11-06 08:49 552 --a------ C:\WINDOWS\system32\d3d8caps.dat
2007-11-05 10:23 <DIR> d-------- C:\Program Files\BoltSoft
2007-11-02 22:36 9,892,226 --a------ C:\Download Accelerator Plus 8.5 Premium + Crack.ZIP
2007-11-02 15:01 <DIR> d-------- C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\Gaijin Ent
2007-11-01 17:30 <DIR> d-------- C:\My Downloads
2007-11-01 17:30 <DIR> d-------- C:\Documents and Settings\Compaq_Owner\Application Data\BearShare
2007-11-01 16:22 <DIR> d-------- C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\Apple Computer
2007-11-01 16:21 <DIR> d-------- C:\Program Files\iTunes
2007-11-01 16:21 <DIR> d-------- C:\Program Files\iPod
2007-11-01 16:19 <DIR> d-------- C:\Program Files\QuickTime
2007-11-01 16:19 <DIR> d-------- C:\Program Files\Apple Software Update
2007-11-01 16:19 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2007-11-01 16:18 <DIR> d-------- C:\Program Files\Common Files\Apple
2007-11-01 16:18 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2007-11-01 15:57 <DIR> d-------- C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\Bearshare Premium P2P
2007-11-01 13:30 <DIR> d--h----- C:\Documents and Settings\ComputerFixer\Application Data\ijjigame
2007-10-30 17:12 <DIR> d-------- C:\Program Files\Common Files\Download Manager
2007-10-30 16:23 <DIR> d-------- C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\Xfire
2007-10-29 22:07 138,413 --a------ C:\Documents and Settings\Compaq_Owner\Application Data\bnzvcsx.exe
2007-10-29 21:14 <DIR> d-------- C:\Program Files\Lavasoft
2007-10-29 11:45 <DIR> d-------- C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\PE Explorer
2007-10-28 21:28 <DIR> d-------- C:\Program Files\UZC Trial
2007-10-28 10:15 53,760 --a------ C:\WINDOWS\vfwwdm32.dll
2007-10-28 10:14 <DIR> d-------- C:\Program Files\Qmax Webcam
2007-10-28 10:14 241,628 --a------ C:\WINDOWS\system32\drivers\TD0608.SYS
2007-10-28 10:14 65,536 --a------ C:\WINDOWS\system32\CamLib10.Dll
2007-10-27 22:04 138,413 --a------ C:\Documents and Settings\Compaq_Owner\Application Data\mmxpvrl.exe
2007-10-27 21:30 <DIR> d-------- C:\Program Files\CursorXP
2007-10-27 18:11 <DIR> d-------- C:\Documents and Settings\ComputerFixer\Application Data\TuneUp Software
2007-10-27 18:10 <DIR> d-------- C:\Documents and Settings\ComputerFixer\Application Data\Yahoo!
2007-10-27 18:10 <DIR> d-------- C:\Documents and Settings\ComputerFixer\Application Data\IE7Pro
2007-10-27 18:05 <DIR> d-------- C:\Documents and Settings\ComputerFixer\Application Data\Symantec
2007-10-27 17:39 <DIR> d-------- C:\Documents and Settings\ComputerFixer\Application Data\PC Suite
2007-10-27 17:39 <DIR> d-------- C:\Documents and Settings\ComputerFixer\Application Data\Locktime
2007-10-27 17:38 <DIR> d-------- C:\Documents and Settings\ComputerFixer\WINDOWS
2007-10-26 23:27 281,600 --a------ C:\WINDOWS\hstsys.dll
2007-10-26 23:13 138,413 --a------ C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\sgllklt.exe
2007-10-26 22:58 138,413 --a------ C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\flpxgpq.exe
2007-10-25 20:54 138,413 --a------ C:\Documents and Settings\Compaq_Owner\Application Data\lojjdux.exe
2007-10-25 17:41 <DIR> d-------- C:\Documents and Settings\NetworkService\Application Data\Xfire
2007-10-22 07:23 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\IJJIGame
2007-10-19 17:07 <DIR> d-------- C:\Program Files\Sallys Salon
2007-10-15 19:27 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Shockwave
2007-10-14 13:22 <DIR> d-------- C:\Program Files\Safer Networking
2007-10-12 22:42 582,656 --a------ C:\WINDOWS\system32\dllcache\rpcrt4.dll
2007-10-12 17:30 <DIR> d-------- C:\AMESrc
2007-10-10 21:20 <DIR> d-------- C:\Program Files\ADSL
2007-10-10 21:18 6,032 --a------ C:\WINDOWS\system32\adinst32.dll
2007-10-09 12:41 13,567 --a------ C:\WINDOWS\system32\drivers\CDRBSDRV.SYS
2007-10-09 12:40 106,496 --a------ C:\WINDOWS\system32\FPXS2Pro.dll
2007-10-09 12:39 274,432 --a------ C:\WINDOWS\system32\FFTIFF16.dll
2007-10-09 12:39 155,648 --a------ C:\WINDOWS\system32\FFRAFLIB.DLL
2007-10-09 12:38 81,924 --a------ C:\WINDOWS\system32\drivers\VC4CB104.SYS
2007-10-09 12:38 69,632 --a------ C:\WINDOWS\system32\FREGSHEX.DLL
2007-10-09 12:38 65,536 --a------ C:\WINDOWS\system32\FINFCHECK.dll
2007-10-09 12:38 45,056 --a------ C:\WINDOWS\system32\FINFCOPY.dll
2007-10-09 12:38 45,056 --a------ C:\WINDOWS\system32\FCLKBTN.DLL
2007-10-08 15:22 <DIR> d-------- C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\Netscape
2007-10-08 13:24 24,576 --a------ C:\WINDOWS\system32\RunSetup.exe
2007-10-08 11:58 <DIR> d-------- C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\LGSync
2007-10-08 11:51 <DIR> d-------- C:\Program Files\LG Electronics
2007-10-08 11:50 929,844 --a------ C:\WINDOWS\system32\MFC42D.DLL
2007-10-08 11:50 798,773 --a------ C:\WINDOWS\system32\MFCO42D.DLL
2007-10-08 11:50 434,252 --a------ C:\WINDOWS\system32\MSVCRTD.DLL
2007-10-08 11:50 291,840 --a------ C:\WINDOWS\system32\msvcirtd.dll
2007-10-08 11:50 36,864 --a------ C:\WINDOWS\system32\CSDLGE1LIB.dll
2007-10-08 11:49 <DIR> d-------- C:\Program Files\LGE GSM PC Sync
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2007-11-07 23:56 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-11-07 23:41 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-11-07 12:50 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF
2007-11-07 12:50 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2007-11-07 12:48 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2007-11-07 11:58 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-11-07 11:43 --------- d-----w C:\Program Files\Little Fighter 2.5 - v2.0
2007-11-06 07:24 --------- d-s---w C:\Program Files\Xfire
2007-11-05 02:23 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-03 02:59 --------- d-----w C:\Program Files\DAP
2007-11-02 08:07 --------- d-----w C:\Program Files\Shockwave.com
2007-11-01 12:06 --------- d-----w C:\Documents and Settings\Compaq_Owner\Application Data\Xfire
2007-10-28 03:10 --------- d-----w C:\Program Files\MSN Messenger
2007-10-28 03:10 --------- d-----w C:\Program Files\Messenger Plus! Live
2007-10-27 13:20 --------- d-----w C:\Program Files\Common Files\Stardock
2007-10-27 13:00 --------- d-----w C:\Program Files\Stardock
2007-10-27 10:12 --------- d-----w C:\Program Files\TuneUp Utilities 2007
2007-10-27 09:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-10-27 09:43 --------- d-----w C:\Program Files\RegistryFix
2007-10-27 08:59 --------- d-----w C:\Program Files\DriftCity
2007-10-26 10:45 --------- d--h--w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\ijjigame
2007-10-24 12:31 --------- d-----w C:\Program Files\Google
2007-10-21 23:28 --------- d--h--w C:\Documents and Settings\Compaq_Owner\Application Data\ijjigame
2007-10-21 05:10 --------- d-----w C:\Program Files\BitComet
2007-10-21 05:10 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\LimeWire
2007-10-19 05:17 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\Image Zone Express
2007-10-14 06:58 --------- d-----w C:\Program Files\Blaze Media Pro
2007-10-14 06:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2007-10-14 05:17 --------- d-----w C:\Program Files\MessengerDiscovery
2007-10-13 10:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2007-10-12 15:01 --------- d-----w C:\Program Files\Oberon Media
2007-10-12 14:47 --------- d-----w C:\Program Files\Common Files\Oberon Media
2007-10-09 05:01 --------- d-----w C:\Program Files\FinePixViewer
2007-10-09 04:59 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\FUJIFILM
2007-10-09 04:41 --------- d-----w C:\Program Files\PIXELA
2007-10-07 06:41 4,518 ----a-w C:\WINDOWS\system32\drivers\U3SHLPDR200.SYS
2007-10-06 00:01 --------- d-----w C:\Program Files\WIZET
2007-10-05 12:52 --------- d-----w C:\Program Files\Dream Match Tennis
2007-10-05 12:51 --------- d-----w C:\Program Files\Creative
2007-10-05 12:51 --------- d-----w C:\Program Files\Common Files\Mindmaker
2007-10-05 05:55 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\MEGAUPLOADTOOLBAR
2007-10-01 12:29 --------- d-----w C:\Documents and Settings\Compaq_Owner\Application Data\PC Suite
2007-10-01 06:08 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\Nokia
2007-10-01 05:53 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\Nokia Multimedia Player
2007-10-01 05:44 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\DataLayer
2007-10-01 05:39 --------- d-----w C:\Program Files\Nokia
2007-10-01 05:39 --------- d-----w C:\Program Files\Common Files\PCSuite
2007-10-01 05:39 --------- d-----w C:\Program Files\Common Files\Nokia
2007-10-01 05:39 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\PC Suite
2007-10-01 05:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\Downloaded Installations
2007-10-01 05:36 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\AdobeAUM
2007-09-30 00:37 65,536 ----a-w C:\WINDOWS\IFinst27.exe
2007-09-29 03:42 --------- d-----w C:\Program Files\Maxthon2
2007-09-29 03:35 --------- d-----w C:\Program Files\Opera 9.5 alpha
2007-09-26 16:32 --------- d-----w C:\Documents and Settings\Compaq_Owner\Application Data\IE7pro
2007-09-26 12:38 --------- d-----w C:\Program Files\ElcomSoft
2007-09-23 12:32 --------- d-----w C:\Documents and Settings\Compaq_Owner\Application Data\Netscape
2007-09-23 12:31 --------- d-----w C:\Program Files\Netscape
2007-09-21 12:08 --------- d-----w C:\Documents and Settings\Compaq_Owner\Application Data\PE Explorer
2007-09-21 11:03 --------- d-----w C:\Program Files\Nsauditor
2007-09-20 10:58 33,824 ----a-w C:\WINDOWS\system32\drivers\oreans32.sys
2007-09-20 10:16 --------- d-----w C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2007-09-19 02:14 16,844,800 ----a-w C:\WINDOWS\RTHDCPL.EXE
2007-09-19 01:16 4,617,728 ----a-w C:\WINDOWS\system32\drivers\RtkHDAud.sys
2007-09-18 06:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspx.cat
2007-09-18 06:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspl.cat
2007-09-18 06:44 10,658 ----a-w C:\WINDOWS\system32\drivers\srtsp.cat
2007-09-18 06:44 1,430 ----a-w C:\WINDOWS\system32\drivers\srtspl.inf
2007-09-18 06:44 1,421 ----a-w C:\WINDOWS\system32\drivers\srtspx.inf
2007-09-18 06:44 1,415 ----a-w C:\WINDOWS\system32\drivers\srtsp.inf
2007-09-18 06:43 43,696 ----a-w C:\WINDOWS\system32\drivers\srtspx.sys
2007-09-18 06:43 317,616 ----a-w C:\WINDOWS\system32\drivers\srtspl.sys
2007-09-18 06:43 278,576 ----a-w C:\WINDOWS\system32\drivers\srtsp.sys
2007-09-17 09:02 --------- d-----w C:\Program Files\World of Warcraft
2007-09-13 12:42 --------- d-----w C:\Program Files\NHN USA
2007-09-08 13:53 --------- d-----w C:\Documents and Settings\Serangoon.OURCOMPUTER\Application Data\NHN Corporation
2007-05-18 13:10 8 ----a-w C:\Documents and Settings\Compaq_Owner\Application Data\usb.dat.bin
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7dc7bac4-9412-4ea6-add8-99fc3ae34636}]
2007-11-08 05:27 79936 --a------ C:\WINDOWS\system32\mcjibeeq.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D21EF863-1ED1-41DA-804F-3E41933CFABC}]
C:\WINDOWS\system32\pmkjg.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.e xe" [2004-08-04 12:00]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScI nst.exe" [2004-08-04 12:00]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT \TINTSETP.exe" [2004-08-04 12:00]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TIN TSETP.exe" [2004-08-04 12:00]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-08-28 01:59]
"nwiz"="nwiz.exe" [2007-08-28 01:59 C:\WINDOWS\system32\nwiz.exe]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2005-07-22 20:14]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 20:34]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 12:00 C:\WINDOWS\system32\bthprops.cpl]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\I SUSPM.exe" [2004-07-27 21:50]
"ISUSScheduler"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPD ATE~1\issch.exe" [2004-07-27 21:50]
"HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11]
"LClock"="C:\Program Files\LClock\LClock.exe" [2004-09-20 01:27]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.e xe" [2001-07-09 10:50]
"PCDrSmartMonitor"="C:\Program Files\PC-Doctor 5 for Windows\PcdSmartMonitor.exe" [2006-02-02 15:54]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-05-10 14:11]
"DownloadAccelerator"="C:\Program Files\DAP\DAP.exe" [2007-11-03 10:58]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 23:46]
"PCSuiteTrayApplication"="C:\PROGRA~1\Nokia\NOKIAP ~1\LAUNCH~1.exe" [2005-12-13 08:49]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.exe" []
"RemoveElanIcon"="C:\WINDOWS\system32\ELAN.exe " [2002-03-05 17:41]
"AME_CSA"="amecsa.cpl" [2002-03-13 17:58 C:\WINDOWS\system32\AmeCSA.cpl]
"Ad-Watch"="C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe" [2007-10-30 14:47]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-10 07:59]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 18:30]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 17:25]
"RTHDCPL"="RTHDCPL.EXE" [2007-09-19 10:14 C:\WINDOWS\RTHDCPL.EXE]
"f8a53b83"="C:\WINDOWS\system32\vgxwcsim.dll" [2007-11-08 05:27]
"combofix"="C:\WINDOWS\system32\cmd.exe" [2004-08-04 12:00]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-14 07:24]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 05:00]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" [2007-06-15 11:45]
C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Startup\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 19:16:50]
Magic Clock.lnk - C:\Program Files\Stardock\DesktopGadgets\Magic Clock\Magic Clock.exe [2007-10-27 21:00:13]
Magic Weather.lnk - C:\Program Files\Stardock\DesktopGadgets\Magic Weather\Magic Weather.exe [2007-10-27 21:00:14]
Xfire.lnk - C:\Program Files\Xfire\xfire.exe [2007-10-25 06:13:12]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26]
BlueSoleil.lnk - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2007-02-28 10:20:45]
Compaq Connections.lnk - C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe [2006-06-17 12:49:25]
Exif Launcher.lnk - C:\Program Files\FinePixViewer\QuickDCF.exe [2007-03-06 15:11:53]
hp psc 1000 series.lnk - C:\Program Files\HP\Digital Imaging\bin\hpohmr08.exe [2003-04-09 18
38]
hpoddt01.exe.lnk - C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe [2003-04-09 18:11:12]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="C:\\Documents and Settings\\All Users\\Application Data\\TuneUp Software\\TuneUp Utilities\\WinStyler\\tu_logonui.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\opnmnkl]
opnmnkl.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll 2007-06-28 18:29 176128 C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winetn32]
winetn32.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winvtv32]
winvtv32.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\system32\pmkjg.dll
R1 oreans32;oreans32;\??\C:\WINDOWS\system32\drivers\ oreans32.sys
R2 CTDevice_Srv;CT Device Query service;C:\Program Files\Creative\Shared Files\CTDevSrv.exe
R2 SmartProtection Service;SmartProtection Agent Service;C:\Program Files\ThumbDrive Guard\SmartProtectionService.exe
R2 SVKP;SVKP;\??\C:\WINDOWS\system32\SVKP.sys
R2 U3SHLPDR200;U3SHLPDR200;\??\C:\WINDOWS\System32\Dr ivers\U3SHLPDR200.SYS
R2 UxTuneUp;TuneUp Theme Extension;C:\WINDOWS\System32\svchost.exe -k netsvcs
R3 AmeAtmPc;AmeAtmPc;C:\WINDOWS\system32\DRIVERS\AmeA tmPc.sys
R3 AtmElan;ATM Emulated LAN;C:\WINDOWS\system32\DRIVERS\atmlane.sys
R3 DCamUSBTP10;Qmax Webcam;C:\WINDOWS\system32\Drivers\TD0608.sys
R3 PCD5SRVC{8A863ACB-F5F6CC6A-05010003};PCD5SRVC{8A863ACB-F5F6CC6A-05010003} - PCDR Kernel Mode Service Helper Driver;\??\C:\PROGRA~1\PC-DOC~1\PCD5SRVC.pkms
S3 AtmLane;ATM LAN Emulation;C:\WINDOWS\system32\DRIVERS\atmlane.sys
S3 BTNetFilter;Bluetooth Network Filter;\??\C:\WINDOWS\system32\drivers\BTNetFilter .sys
S3 dump_wmimmc;dump_wmimmc;\??\C:\Program Files\WIZET\MapleStory\GameGuard\dump_wmimmc.sys
S3 geebers12;geebers12;\??\C:\Documents and Settings\Compaq_Owner\Desktop\Everything\CheatTabl es\MapleSea Engine\BuffyV2\nvid888.sys
S3 IlvMoneyDRIVER53;IlvMoneyDRIVER53;\??\C:\Documents and Settings\Compaq_Owner\My Documents\My Received Files\IlvMoney1059a.sys
S3 PageFau1t;PageFau1t;\??\C:\Documents and Settings\Serangoon.OURCOMPUTER\Desktop\skyz\PageFa u1t.sys
S3 sys_com001;sys_com001;\??\C:\Documents and Settings\Compaq_Owner\Desktop\SysComEngine_1059\sy scom.sys
S3 USBFVNETR;EZ Connect 11 Mbps Wireless USB Adapter;C:\WINDOWS\system32\DRIVERS\vnetusbr.sys
S3 usbprint;Microsoft USB PRINTER Class;C:\WINDOWS\system32\DRIVERS\usbprint.sys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2007-11-02 09:15:00 C:\WINDOWS\Tasks\1-Click Maintenance.job"
"2007-11-01 08:19:16 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-11-07 04:08:00 C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1174792477.job"
"2007-11-07 01:35:01 C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1177253528.job"
- c:\Program Files\HP\Digital Imaging\bin\hpqfrucl.exe
"2007-08-10 04:57:47 C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1177822586.job"
- C:\Program Files\HP\Digital Imaging\Bin\hpqfrucl.exe
"2007-11-07 02:24:00 C:\WINDOWS\Tasks\FRU Task $ContextID$.job"
.
************************************************** ************************
catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-11-08 08:03:35
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
C:\WINDOWS\system32\miscwxgv.tmp 570170 bytes
************************************************** ************************
.
Completion time: 2007-11-08 8:08:01 - machine was rebooted
.
--- E O F ---
Thanks!
NEAL
